CVEs-PoC/2013/CVE-2013-1495.md

CVE-2013-1495

Description

asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.

POC

Reference

• http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

Github

No PoCs found on GitHub currently.